CWE-295 Improper Certificate Validation

Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability

Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability

MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

Duplicate Advisory: Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure

Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation

Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning

Steeltoe: Header-forwarded client cert lacks proof of private-key possession

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor

Apache Tomcat - Client certificate verification bypass

MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

kas Persistently Disables SSH Host Key Checking

Spring Boot's Mail Auto-Configuration Does Not Enable SSL Hostname Verification

RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM

Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication